[release-1.21] Release cert-manager v1.21.0-beta.0#2189
Merged
cert-manager-prow[bot] merged 6 commits intoJul 1, 2026
Merged
Conversation
Populate the contributors, maintainers, steering committee, and v1.21.0 changelog sections using the release-notes generator tool (scripts/release-notes). Signed-off-by: Richard Wall <richard.wall@cyberark.com>
cert-manager-prow
Bot
added
dco-signoff: yes
✅ Deploy Preview for cert-manager ready!Built without sensitive environment variables
To edit notification comments on pull requests, go to your Netlify project configuration. |
Signed-off-by: Richard Wall <richard.wall@cyberark.com>
- Update gendocs script to pull from release-1.21 branch
- Regenerate content/docs/reference/api-docs.md from release-1.21
- Regenerate content/docs/cli/{cainjector,controller}.md from release-1.21
Signed-off-by: Richard Wall <richard.wall@cyberark.com>
cert-manager-prow
Bot
added
size/XL
- Rewrote the intro summary to list all new features alongside breaking changes - Added major theme sections for: ARI (RFC 9773), AWS IAM auth for Vault, Modern2026 PKCS#12 profile, certificate renewal policies, Gateway API improvements (ListenerSet parentRef fallback, ignore-tls-listeners, additional protocols, enableGatewayAPI restructure), cainjector improvements (CAInjectorMerging GA, SSA unconditional, --ignore-namespaces flag), Venafi integration updates (OAuth observability, PANW NGTS support), ACME security hardening (GHSA-8rvj-mm4h-c258, transient error retry), and a Notable Bug Fixes subsection covering integer overflow, infinite re-issuance loop, DNS issuer validation, Vault path traversal, and DoH OOM - Added new GitHub handles and terms to .spelling allowlist Signed-off-by: Richard Wall <richard.wall@cyberark.com>
Signed-off-by: Richard Wall <richard.wall@cyberark.com>
Signed-off-by: Richard Wall <richard.wall@cyberark.com>
Member
|
/approve |
Contributor
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: wallrj The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
cert-manager-prow
Bot
added
the
approved
Contributor
There was a problem hiding this comment.
Pull request overview
This PR prepares the website for the cert-manager v1.21.0-beta.0 pre-release by updating release notes and regenerating/refreshing reference documentation so the site reflects the v1.21 feature set and changelog.
Changes:
- Updates the v1.21 release notes with expanded Major Themes, populated community sections, and a generated v1.21.0 changelog block.
- Regenerates/updates API reference and CLI flag documentation for new v1.21 fields/flags (ARI, renewal policies, Vault AWS auth, etc.).
- Advances the gendocs generation script to target the
release-1.21branch.
Reviewed changes
Copilot reviewed 7 out of 7 changed files in this pull request and generated 6 comments.
Show a summary per file
| File | Description |
|---|---|
| scripts/gendocs/generate-new-import-path-docs | Switches gendocs generation inputs to release-1.21. |
| content/docs/variables.json | Updates the “latest version” variable used across docs. |
| content/docs/releases/release-notes/release-notes-1.21.md | Adds draft banner, expanded themes, and generated community + changelog sections. |
| content/docs/reference/api-docs.md | Regenerated API reference including new v1.21 API/config fields. |
| content/docs/cli/controller.md | Updates controller CLI flags/feature gates docs for v1.21. |
| content/docs/cli/cainjector.md | Updates cainjector CLI docs (e.g., new ignore-namespaces flag). |
| .spelling | Adds new contributor names/terms used in v1.21 notes/docs. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| @@ -1,3 +1,3 @@ | |||
| { | |||
| "cert_manager_latest_version": "v1.20.3" | |||
| "cert_manager_latest_version": "v1.21.0-beta.0" | |||
| </tr> | ||
| <tr> | ||
| <td> | ||
| <code>gatewayAPI,omitzero</code> |
| </td> | ||
| <td> | ||
| <em>(Optional)</em> | ||
| <p>URL is the base URL for the NGTS API endpoint. Defaults to “<a href='https://api.strata.paloaltonetworks.com/ngts"'>https://api.strata.paloaltonetworks.com/ngts”</a> if not set.</p> |
| </td> | ||
| <td> | ||
| <em>(Optional)</em> | ||
| <p>TokenEndpoint is the OAuth 2.0 token endpoint URL used to obtain access tokens, for example “<a href='https://auth.apps.paloaltonetworks.com/oauth2/access_token"'>https://auth.apps.paloaltonetworks.com/oauth2/access_token”</a>. Defaults to “<a href='https://auth.apps.paloaltonetworks.com/oauth2/access_token"'>https://auth.apps.paloaltonetworks.com/oauth2/access_token”</a> if not set.</p> |
|
|
||
| - TODO | ||
| {/* BEGIN contributors */} | ||
| - [`@Copilot`](https://github.com/Copilot) |
| - Feat(certificate): adding certificate renewal policies ([`#8258`](https://github.com/cert-manager/cert-manager/pull/8258), [`@hjoshi123`](https://github.com/hjoshi123)) | ||
| - Make cainjector use SSA unconditionally and deprecate the ServerSideApply feature gate ([`#8692`](https://github.com/cert-manager/cert-manager/pull/8692), [`@erikgb`](https://github.com/erikgb)) | ||
| - Processed annotations `cert-manager.io/alt-names`, `cert-manager.io/ip-sans` to Certificates generated from ingress like objects in cert-shim controllers. ([`#8927`](https://github.com/cert-manager/cert-manager/pull/8927), [`@jabbrwcky`](https://github.com/jabbrwcky)) | ||
| - Promote the CAInjectorMerging feature gate to GA ([`#8583`](https://github.com/cert-manager/cert-manager/pull/8583), [`@Copilot`](https://github.com/apps/copilot-swe-agent)) |
cert-manager-prow
Bot
merged commit Jul 1, 2026
b7dc676
into
cert-manager:release-next
7 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR contains the release notes for cert-manager v1.21.0-beta.0, a pre-release for testing purposes only. Do not use pre-releases in production.
Preview: https://deploy-preview-2189--cert-manager.netlify.app/docs/releases/release-notes/release-notes-1.21/
Populate the contributors, maintainers, steering committee, and v1.21.0 changelog sections in the release notes file.
The Major Themes section has been expanded to cover all notable features and bug fixes now visible in the generated changelog, including: ARI (RFC 9773) support, AWS IAM authentication for Vault, Modern2026 PKCS#12 profile, certificate renewal policies, Gateway API improvements, cainjector improvements, Venafi integration updates, ACME security hardening, and notable bug fixes.
Generated using the
scripts/release-notestool (see #1785 for the tool itself). Run against therelease-1.21branch.